Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: u156szy1XRjM8oU89+JTpQ8kANo1j3VwljGWbJBJjDE=
Subject key identifier: 61:D9:58:63:DE:5F:D8:15:5F:84:05:D4:D0:0B:92:14:17:D7:E4:20
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 019E3004C0F6B3F6E309DDF435879150172D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 0758
Signing time: Sat 16 May 2026 09:01:18 +0000
Manifest this update: Sat 16 May 2026 09:01:18 +0000
Manifest next update: Sun 17 May 2026 09:01:18 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: F2AiFm6m7k7mkmeb/L+8rW4e6InuLY+B6Xq+fFdIcMI=)
2: Ip878u9pBQi9g89YkISpQa7bCf0.roa (hash: 5w9cx6mrV87FtSruYjnPB/haPzCFoJHrmqiObhlSqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:c0:f6:b3:f6:e3:09:dd:f4:35:87:91:50:17:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: May 16 09:01:18 2026 GMT
Not After : May 17 09:01:18 2026 GMT
Subject: CN=61d95863de5fd8155f8405d4d00b921417d7e420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:69:e9:1b:32:5a:ec:68:e9:a9:37:e0:e5:
49:a6:55:e8:8f:6d:f7:81:f1:7e:5f:e2:1b:c9:7a:
c7:e9:1a:2d:2d:1b:3c:65:64:24:f0:26:5d:0d:6f:
e5:c1:91:5d:f9:12:f4:44:44:a8:61:60:35:0b:8a:
c7:c7:ff:89:dc:b7:a1:ec:4f:c6:a0:1b:99:a5:53:
5d:08:53:0b:90:d7:29:67:5b:c5:ed:89:c7:ce:5b:
5b:13:f0:81:36:c1:81:ab:b9:36:b4:24:1c:46:93:
fd:10:dd:dd:f5:40:c7:f0:17:1a:ba:3c:c4:b2:76:
57:4e:a2:6e:60:9f:a5:10:49:be:8e:d2:2d:f7:62:
e8:69:25:34:a0:61:a7:2d:0e:6d:c0:f0:25:98:e0:
91:85:df:89:df:26:d3:e9:6e:20:04:a5:86:30:c2:
a8:eb:ac:98:68:03:09:66:46:7d:1f:c5:82:d3:4d:
b2:7a:5e:81:ae:14:da:a2:f1:17:40:60:fd:3f:85:
4a:00:60:bf:c0:d8:03:a8:0e:5e:58:74:c9:57:b0:
79:0d:26:22:03:cc:74:62:59:31:bb:7b:59:71:61:
b5:0e:57:16:1d:f9:a1:1f:87:87:67:f8:9c:46:a7:
aa:a9:8a:32:03:9c:79:26:2b:b7:1b:e3:d3:85:99:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D9:58:63:DE:5F:D8:15:5F:84:05:D4:D0:0B:92:14:17:D7:E4:20
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:17:74:79:5c:49:b9:2d:1c:1e:10:fb:23:a9:f7:eb:07:85:
7f:30:f3:b3:27:f9:b2:7e:2e:db:80:ca:57:47:3c:f3:36:2c:
51:8a:c4:0d:d3:4e:b0:3c:a3:0b:f0:4a:a1:32:ee:f1:75:c1:
0a:b7:80:51:02:43:06:77:da:f8:17:66:ae:38:89:27:9a:b5:
8d:f1:4f:ff:3e:2f:68:a1:54:cf:6c:4f:01:02:d0:17:ba:2d:
1f:61:ee:40:be:44:7f:e0:e8:12:b8:50:aa:47:26:03:17:68:
e3:fb:a9:7d:06:68:ac:f0:60:b6:10:45:07:a2:c2:bd:03:9f:
c8:96:e0:41:ed:dc:48:03:43:0f:cb:f8:0c:3d:b9:2f:0c:92:
e0:3f:63:a9:b5:30:86:06:b4:67:35:87:51:11:53:1c:7c:b2:
05:61:9c:f1:78:bc:b0:5d:91:eb:52:46:d9:3d:49:82:9a:7c:
3d:e5:5c:31:2f:31:ea:64:09:7c:41:98:c5:53:36:09:66:d9:
67:f9:0a:31:aa:1a:c6:62:04:c5:e8:de:7a:f8:e2:61:24:0f:
5f:1f:02:97:ad:2c:e7:e0:b5:af:5e:58:06:57:79:e2:5a:5a:
0c:d9:62:2a:84:8e:16:97:85:c3:4f:12:ab:c1:c1:f7:55:69:
d8:4c:1e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:44 2026 by rpki-client